Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft
File:                     CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft (raw, json)
Hash identifier:          G3C2RX/XGg5rq/15xh5vNQ2OPqJUg0FyYtCbIe/X1VQ=
Subject key identifier:   37:B0:E5:3D:A2:3B:41:02:B9:49:62:E4:22:A6:20:1F:BF:05:16:8F
Authority key identifier: CB:0E:C6:B7:F7:40:56:65:C6:58:4B:5D:B7:F3:C8:75:5A:A6:D2:27
Certificate issuer:       /CN=CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227
Certificate serial:       68F8EC9A4DB4F8AE4725393FE90E1F20748B8EE0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft
Manifest number:          0257
Signing time:             Mon 30 Jun 2025 16:39:44 +0000
Manifest this update:     Mon 30 Jun 2025 16:34:44 +0000
Manifest next update:     Tue 01 Jul 2025 17:30:44 +0000
Files and hashes:         1: 323830343a333531633a3a2f33322d3438203d3e20323636323639.roa (hash: 0RAwiE1uQZC4AnhcHcz8NAlKcFd2Q+l+WGtwVHrZPlg=)
                          2: 3137302e37382e39362e302f32322d3234203d3e20323636323639.roa (hash: HnG1DMJoAuqnzDxdBRoltWz1OrOXM/EvggoTnkRAc/Q=)
                          3: CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.crl (hash: Z3/LgqXll6Uxmupxui5R8dZeL22Wn/nHxp+u0dItQrY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.crl
                          rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 17:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f8:ec:9a:4d:b4:f8:ae:47:25:39:3f:e9:0e:1f:20:74:8b:8e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227
        Validity
            Not Before: Jun 30 16:34:44 2025 GMT
            Not After : Jul  1 17:30:44 2025 GMT
        Subject: CN=37B0E53DA23B4102B94962E422A6201FBF05168F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bc:48:df:ed:1a:11:c3:fe:8d:e4:ae:29:c0:
                    83:be:d7:63:af:40:1b:ba:74:fb:f4:89:df:1e:a5:
                    6f:e6:cb:8f:93:80:54:b2:87:56:1c:fc:f3:ba:7f:
                    d9:cd:30:8c:ad:59:4b:74:37:7c:79:3c:d0:1c:7e:
                    05:88:03:04:8b:55:f7:c4:7e:0c:25:1e:e3:3c:d7:
                    de:de:cf:12:79:bc:d5:7e:83:f7:f4:a6:27:36:d2:
                    db:9a:17:16:ec:88:bb:2e:c2:a7:86:37:1b:8e:d4:
                    2a:e6:95:58:99:08:0b:92:83:4a:a8:de:cf:83:21:
                    fc:de:a5:f8:9a:af:83:0e:be:70:ea:3c:a4:de:c2:
                    f7:72:ec:5e:5d:a0:88:3f:17:9d:c3:34:f9:9e:21:
                    fe:62:e2:c9:c6:7e:00:e3:4b:00:3f:23:e0:03:58:
                    67:0a:1c:4e:17:58:cd:81:1d:73:b1:64:7c:a7:c0:
                    2c:43:0f:0c:54:b6:0c:82:8e:24:83:51:c1:39:eb:
                    15:90:7c:fd:c8:d5:61:40:f7:06:68:28:90:ee:ea:
                    7d:81:1d:cc:db:84:11:ee:89:16:d4:97:45:3c:d1:
                    ce:df:e5:2d:af:a6:61:a5:91:18:1a:61:37:41:aa:
                    39:1b:f8:20:5c:c0:25:2a:49:20:3a:75:b7:a1:35:
                    3a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B0:E5:3D:A2:3B:41:02:B9:49:62:E4:22:A6:20:1F:BF:05:16:8F
            X509v3 Authority Key Identifier:
                keyid:CB:0E:C6:B7:F7:40:56:65:C6:58:4B:5D:B7:F3:C8:75:5A:A6:D2:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:85:c8:cf:11:6a:d2:3c:a1:ec:57:2e:d7:de:2b:28:f6:ce:
         12:c6:9e:5a:ed:81:7b:64:bb:15:86:52:ce:17:fb:38:d7:f4:
         85:9f:a8:ba:c4:4f:3b:66:a8:5b:e6:95:b8:41:05:da:a5:e0:
         a5:ff:66:bd:ed:ae:c2:6e:e0:62:ea:16:73:31:7f:7d:84:9b:
         1f:32:f3:b7:8e:de:bf:61:7c:0b:c4:5f:6b:e7:cd:73:59:28:
         ba:b4:66:f5:65:00:34:1e:fa:20:36:a4:25:5e:66:e5:44:90:
         2c:ab:f0:ad:2a:5a:84:e6:71:f9:7f:75:09:e0:80:b3:31:54:
         98:ec:26:2d:1c:bb:96:48:63:3f:3d:0c:2d:e3:00:75:fe:86:
         19:f4:67:46:1a:92:d8:09:99:e5:f3:b2:44:0a:24:94:d1:f1:
         f6:67:c4:2f:cd:3b:cd:1e:b7:60:52:24:48:5a:3a:da:02:b2:
         6b:dc:63:c0:f6:56:03:7b:2f:0f:81:cf:d2:13:33:df:2d:78:
         fa:ef:47:34:0e:ab:ba:90:ca:92:fb:31:b4:43:83:ee:55:cb:
         95:c7:37:b1:a6:4e:d9:41:98:71:6c:10:aa:e2:9c:3d:7b:f6:
         25:8e:46:78:06:63:e7:5d:f7:3c:c5:95:64:77:c4:f1:dc:ba:
         5b:6d:dd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:02:37 2025 by rpki-client